This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft File: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft (raw, json) Hash identifier: bIi5M4i+wXW5cLRqQPfZLPiVxvtbMuWdHalCxzCC6II= Subject key identifier: 6A:D5:C9:CF:59:88:01:4C:09:32:41:B5:D3:33:67:BD:29:41:EF:29 Authority key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 Certificate issuer: /CN=A91CDCF5/serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft Manifest number: 08 Signing time: Sun 25 Jan 2026 07:09:45 +0000 Manifest this update: Sun 25 Jan 2026 07:09:45 +0000 Manifest next update: Sun 01 Feb 2026 07:09:45 +0000 Files and hashes: 1: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl (hash: dFEoeRW1rBKbw/GtiHNDJeUDOMRtX3B/ny243oWTU3M=) 2: D7C273FAF1EF11F0A394FA90446F56BC.roa (hash: ze6YpiOXHKxO08wBBbvFatBCbvIHrG++mi98FPG6pHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Validity Not Before: Jan 25 07:09:45 2026 GMT Not After : Feb 1 07:09:45 2026 GMT Subject: CN=6975c1b9-8282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8f:30:16:59:4d:4b:5f:69:3d:95:cf:c4:00: f5:7c:ed:ea:ad:2b:11:cf:6b:80:85:0f:c8:01:9a: 59:14:30:4f:70:be:50:51:06:b7:c9:a4:19:bd:01: 79:89:3c:e4:84:d4:bd:29:2f:d5:b5:45:a1:9e:ee: 2f:9d:5c:6d:f8:7f:87:e0:72:92:2e:5d:65:ce:ad: 2c:ae:ba:07:8d:5b:5e:f9:e4:50:ae:04:bc:66:82: ea:cb:d6:64:a3:36:2f:e3:45:c9:46:88:e4:a3:8e: 50:06:63:87:71:2e:8e:0c:b3:e3:0e:d5:a5:71:4a: f3:95:92:0b:8e:53:b1:87:02:c0:c5:89:08:a0:50: 43:05:a5:a8:67:6c:ec:b6:8d:d4:4c:0a:3f:7b:df: 14:ab:6a:39:67:13:c9:52:58:53:d6:9b:60:31:94: ad:90:2c:78:c2:0f:e7:d8:02:46:3f:af:2a:c4:56: 8e:e1:fa:4f:cf:e1:58:dd:8e:5f:9b:8e:c8:92:03: fe:8f:52:8e:0f:71:34:a5:4a:fa:4d:25:11:37:0c: c0:56:94:4f:63:49:5d:b3:12:32:f4:91:84:4e:4e: e7:56:d1:a6:0c:c1:20:3f:1c:73:91:32:ae:10:d1: 60:54:32:f3:14:34:22:21:3a:2c:39:22:c8:c3:fe: 5a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D5:C9:CF:59:88:01:4C:09:32:41:B5:D3:33:67:BD:29:41:EF:29 X509v3 Authority Key Identifier: keyid:DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ab:1e:5f:0a:5e:25:bb:50:1f:4b:c7:35:fd:f8:5d:02:38: 04:e3:8a:89:fc:da:51:f5:20:53:7c:c3:8a:c1:76:a3:99:ba: 7c:98:6d:26:db:a9:a5:df:e2:46:bc:f1:3f:ea:56:a6:70:b8: 74:85:1d:17:a8:73:85:b6:0c:a2:aa:15:e2:2b:a9:c3:f2:69: 7d:d0:d3:a1:15:0d:3c:34:4b:2f:44:23:82:40:c0:01:46:c9: 52:cd:ba:59:ce:22:0f:39:ee:9a:30:41:54:a7:ae:5d:6a:de: 0a:7e:09:d0:e9:ce:c0:ee:8f:91:4e:8f:41:04:a0:d2:48:4a: 90:0a:49:44:72:53:22:83:08:9b:ad:6a:9c:b1:3d:bd:22:78: 0e:9d:d8:47:f5:c3:64:a4:a4:b8:d1:0d:d7:5a:1a:f1:42:e0: 69:78:69:40:de:ad:6a:1f:8e:60:05:33:ae:48:de:c2:68:13: f9:d8:c6:e5:f7:28:f7:0b:de:ec:8c:36:55:f0:f1:bb:75:be: 76:45:39:b0:c2:97:0b:9c:66:da:78:d4:04:cf:4c:5a:ec:f9: 25:8d:ea:0b:85:75:2c:66:3f:ad:2a:ee:93:64:bd:9d:5b:d5: c5:49:db:66:17:fd:05:c2:e6:3e:33:b7:fd:51:48:5d:4d:0a: a3:9b:bb:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFD RENGNTExMC8GA1UEBRMoREYwRDUwQzdFRTJCMTE3NkQ1OEQxOEQ4NUQyNTkyOTM2 QUQ3QjI0NjAeFw0yNjAxMjUwNzA5NDVaFw0yNjAyMDEwNzA5NDVaMBgxFjAUBgNV BAMMDTY5NzVjMWI5LTgyODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjjzAWWU1LX2k9lc/EAPV87eqtKxHPa4CFD8gBmlkUME9wvlBRBrfJpBm9AXmJ POSE1L0pL9W1RaGe7i+dXG34f4fgcpIuXWXOrSyuugeNW1755FCuBLxmgurL1mSj Ni/jRclGiOSjjlAGY4dxLo4Ms+MO1aVxSvOVkguOU7GHAsDFiQigUEMFpahnbOy2 jdRMCj973xSrajlnE8lSWFPWm2AxlK2QLHjCD+fYAkY/ryrEVo7h+k/P4Vjdjl+b jsiSA/6PUo4PcTSlSvpNJRE3DMBWlE9jSV2zEjL0kYROTudW0aYMwSA/HHORMq4Q 0WBUMvMUNCIhOiw5IsjD/loDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUatXJz1mI AUwJMkG10zNnvSlB7ykwHwYDVR0jBBgwFoAU3w1Qx+4rEXbVjRjYXSWSk2rXskYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1Lzc1RkU2RjRBRjFF MzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhiVmpSallYU1dTazJyWHNr WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM3cxUXgtNHJFWGJWalJqWVhTV1NrMnJYc2tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Q0Y1Lzc1RkU2RjRBRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhi VmpSallYU1dTazJyWHNrWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAirHl8KXiW7UB9LxzX9+F0COATjion82lH1IFN8w4rBdqOZunyYbSbb qaXf4ka88T/qVqZwuHSFHReoc4W2DKKqFeIrqcPyaX3Q06EVDTw0Sy9EI4JAwAFG yVLNulnOIg857powQVSnrl1q3gp+CdDpzsDuj5FOj0EEoNJISpAKSURyUyKDCJut apyxPb0ieA6d2Ef1w2SkpLjRDddaGvFC4Gl4aUDerWofjmAFM65I3sJoE/nYxuX3 KPcL3uyMNlXw8bt1vnZFObDClwucZtp41ATPTFrs+SWN6guFdSxmP60q7pNkvZ1b 1cVJ22YX/QXC5j4zt/1RSF1NCqObu0U= -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:06 2026 by rpki-client